Remove tag consent
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. The order also requires that the company destroy personal data for which it had not received consent and to create a document retention and destruction policy.

article thumbnail

Guest Post -- New Global Data  and Privacy Regulations in 2018 and the GDPR

AIIM

Affirmative, Clear Consent – Organizations must obtain “affirmative, clear consent” to store and use a person’s data. Implied consent (pre-checked opt-in boxes, a statement buried in a privacy policy, etc.) In most organizations this information is managed in multiple systems. is no longer sufficient.

GDPR 86